CLAIMS 

What is claimed is: 

L A method for tokenless biometric authorization of an electronic commimication, 
using a biometric sample, a master electronic identicator, and a public 
communications network, wherein said method comprises: 

a. an electronic communication formation step, wherein at least one 
communication comprising electronic dam is formed; 

b. a user registration step, wherein a user ^ectronically submits a registration 
biometric sample taken directly from me person of the user; 

c. a public network data transmittal stop, wherein the registration biometric 
sample is electronically transmitter to a master electronic identicator via a 
public communications network/said master electronic identicator comprising 
a computer database which elecftronically stores all of the registration 
biometric samples from all oythe registered users; 

d. a user registration biometric^torage step, wherein the registration biometric 
sample is electronically stored within the master electronic identicator; 

e. a bid biometric transmittal step, wherein a bid biometric sample, taken directly 
from the person of the nser, is electronically transmitted to at least one 
electronic identicaton 

f a user identificationf step, wherein an electronic identicator compares the bid 
biometric sample /o at least one registration biometric sample previously 
stored in an electronic identicator, for producing either a successful or failed 
identification c/f the user; 

g. an electronicy(:ommunication authorization step, wherein upon a successfiil 

identification of the user by an electronic identicator, at least one electronic 

communication is authorized for execution; 

wherein an electrons communication is biometrically-authorized without the user having 
to present any personalized man-made memory tokens such as smartcards, or 
magnetic stripe cards. 
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2. The method of claim 1 wherein during the bid biometric transmittal step, the 
electronic identicator comprises any of the following: a master electronic identicator, 
and; a subset electronic identicator, said subset electronic identicator comprising a 
computer database which electronically stores a subset of all of the registration 

5 biometric samples from registered users. / 

3. The method of claim 1 wherein any steps of said methoA occur in any of the 
following chronological sequences: simultaneously, aiid; separated by any increment 
of time including seconds, minutes, hours, days, we^s, months, and years. 

4. The method of claim 1 , further comprising: / 

10 a. a first comparison step, wherein a subset electronic identicator compares the 

bid biometric sample taken directly frony the person of the user with at least 
one registration biometric sample previously stored in the subset electronic 
identicator for producing either a sucoessful or failed identification of the user; 

b. a public network data transmittal step, wherein if the subset electronic 
15 identicator retums a failed identifioation result, the bid biometric sample is 

electronically transmitted via a piplic communications network to a master 
electronic identicator; / 

c. a second comparison step, wherein a master electronic identicator compares 
the bid biometric sample to ay least one registration biometric sample 

20 previously stored in the mas/er electronic identicator for producing either a 

successful or failed identification of the user; 

d. a communication authorization step, wherein upon the earliest successful 

identification of the usei/by an electronic identicator, at least one electronic 

communication is authorized for execution; 

25 wherein an electronic communioation is biometrically-authorized without the user having 
to present any personalized man-made memory tokens such as smartcards, or 
magnetic swipe cards. / 



5. The method of claim 1 further comprising: 
30 a. an enterprise registration step, wherein an enterprise electronically submits 

registration identity data; 
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b. a public network data transmittal step, wherein the enterorise registration 
identity data is electronically transmitted to a master electronic identicator via 
a public communications network; / 

c. an enterprise registration identity data storage step, wherein the enterprise 
registration identity data is electronically stored within the master electronic 
identicator; / 

d. an enterprise bid identity data network transmittal step, wherein enterprise bid 
identity data is electronically transmitted to at least one electronic identicator, 
said electronic identicator comprising any of me following: a subset electronic 
identicator and a master electronic identicator; 

e. an enterprise identification step, wherein an electronic identicator compares 
the enterprise bid identity data with entermise registration identity data 
previously stored in the electronic identicator, for producing either a 
successful or failed identification of ther enterprise; 

f an electronic communication authorization step, wherein upon a successful 

identification of the enterprise by anyelectronic identicator and a successful 

identification of the user by an elec/ronic identicator, at least one electronic 

communication is authorized for execution; 

wherein an electronic communication is biometrically-authorized without the user having 
to present any personaUzed man-made memory tokens such as smartcards, or 
magnetic swipe cards. / 

6. The method of claim 5 wherein any sxeps of said method occur in any of the 
following chronologies: simultaneously, and; separated by any increment of time 
including seconds, minutes, hours,/days, weeks, months, and years. 



7. The method of claim 5 further comprising: 

a. a first comparison step, wherein a subset electronic identicator compares 
the enterprise bid identity data with enterprise registration identity data 
previously stored im the subset electronic identicator for producing either a 
successful or failed identification of the enterprise; 
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b. a public network data transmittal step, wherein if the subset electronic 
identicator returns a failed identification result, the enterprise bid identity 
data is electronically transmitted via a public communications network to 
a master electronic identicator; / 

c. a second comparison step, wherein a master electronic identicator 
compares the enterprise bid identity data with enterprise registration 
identity data previously stored in the master electronic identicator for 
producing either a successful or failed identificaifion of the enterprise; 

d. a communication authorization step, wherein upon the earliest successful 

identification of the user by an electronic ideniicator and the earliest 

successful identication of the enterprise by an electronic identicator, at 

least one electronic communication is authorized for execution; 

wherein an electronic communication is biometrically-autnorized without the user having 
to present any personalized man-made memory tokens such as smartcards, or 
magnetic swipe cards. / 

8. The method of claim 1 wherein the biometric sample taken directly from the person 
of the user comprises any of the following: a fingerprint, a facial scan, a retinal image, 
an iris scan, and a voice print. / 

9. The method of claim 5 wherein the enterprise is a legally formed entity comprising 
any of the following: a corporation, a foundation, a non-profit organization, a sole 
proprietorship, a limited liability company, aoid a partnership. 

10. The method of claim 1 wherein during the user identification step, the user provides a 
personal identification code to the electronic identicator along with a bid biometric 
sample for purposes of identifying the uspr. 

11. The method of claim 1 further comprising a user re-registration check step, wherein 
the user's registration biometric sample is compared by at least one electronic 
identicator to previously registered biometric samples wherein if a match occurs, the 
electronic identicator is alerted to the /fact that the user has attempted to re-register. 

12. The method of claim 10 further comprising a biometric theft resolution step, wherein 
a user's personal identification code/is changed when the user's registered biometric 
sample is determined to have been paudulently duplicated. 
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13. The method of claim 1, wherein an electronic communication x:omprises any of the 
following: an email communication, a telephone call, an encrypted data packet, an 
Intemet telephony conmiunication, and a facsimile. / 

14. The method of claim 1, wherein during the communication authorization step, any of 
the following is used: an intranet, an extranet, a local area network, a wide area 
network, a cable network, a wireless network, a telephone network, the Intemet, an 
ATM network, or an X.25. / 

15. The method of claim 5 wherein enterprise registration identity data comprises any of 
the following: an alpha-numeric code, a hardware identification code, an email 
address, a financial account, a biometric of an authorized enterprise representative, a 
non- financial data repository account, a telephoip number, a mailing address, a digital 
certificate, a network credential, an Intemet protocol address, a digital signature, an 
encryption key, and an instant messaging address. 

16. The method of claim 1 wherein the communication authorization step fiirther 
comprises a third-party communications step, wherein the electronic identicator 
electronically communicates with a third-party server in order to authorize the 
electronic communication. / 

17. The method of claim 1 fiirther comprising: 

a. a rule-module formation step, wherein a rule-module is formed in an 
electronic clearinghouse, saicy rule-module fiirther comprising at least one 
user-customized pattern data which is associated with at least one execution 
command; / 

b. a rule-module invocation step, wherein upon a successfiil identification of the 
user, at least one previously designated user-customized rule-module is 
invoked; / 

c. an electronic communication execution step, wherein upon the invocation of a 
user-customized rule-module, at least one electronic communication is 
executed. / 

18. The method of claim 17 wnerein pattem data comprises any of the following: a user 
unique identification code/ demographic information; an email address; a financial 



82 



account; a biometric; internet browsing patterns; a non-financial data repository 
account; a telephone number; a mailing address; purchasing patterns; database 
authorization fields; financial credit report data; a' calj-center queuing, routing and 
automated response program; an email-center c[ueui/g, routing and automated 
response program; data on pre-paid accounts or memberships for products or services; 
electronic data utilization pattems; employee stat/us; job title; data on user behavior 
pattems; a digital certificate; a network credent/al; an internet protocol address; a 
digital signatm'e; an encryption key; an instan/ messaging address; user-customized 
medical records; an electronic audio signatui/e; and an electronic visual signature. 

19. The method of claim 17 wherein said execution commands further comprise user- 
customized instructions for executing my/of the following: accessing of stored 
electronic data, processing of electronic data, and presentation of electronic data. 

20. The method of claim 19 wherein user-customized accessing of stored electronic data 
further comprises execution of any of me following: activating of an Intemet- 
connected device; accessing of a seciired physical space, and unlocking of a secured 
physical device. / 

21. The method of claim 19, wherein user-customized processing of electronic data 
further comprises invoking any oythe following: a digital certificate, an identity 
scrambler, a database authorization field, an electronic consumer loyalty or consumer 
rewards incentive, an electronic/advertisement, an instant messaging program, real- 
time tracking of an incoming c&ller or an email sender, a time and attendance 
monitoring program, an emergency home alarm and personal safety notification 
program, a real-time challenge-response program, a call-center queuing prioritization 
program, a call-center routing prioritization program, an email-center queuing 
prioritization program, an email-center routing prioritization program, an automated 
caller or emailer response program, a call-forwarding program, and an electronic 
intelligent software program for electronic data search and retrieval. 

22. The method of claim 19 wherein user-customized presentation of electronic data 
comprises any of the following: a print-out, a computer screen display, an audio 
message, a tactile sensaiion and a holographic image. 
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23. The method of claim 17 wherein the rule-module invocatipn step further comprises a 
third-party communications step, wherein the electronic mle-module clearinghouse 
communicates with one or more third-party computers in order to invoke a rule- 
module. / 

24. The method of claim 17, wherein user-customized partem data is provided to the 
electronic rule-module clearinghouse by any of the following: the user, the electronic 
identicator, the electronic rule-module clearinghouse, and a user-authorized third 
party. / 

25. The method of claim 17, wherein user-customized execution commands are provided 
10 to the electronic rule-module clearinghouse by any of the following: the user, the 

electronic rule-module clearinghouse, the electtonic identicator and a user-authorized 
third party. / 

26. The method of claim 17 further comprising: / 

a. a master rule-module storage step, wnerein all of the rule-modules from all of 
15 the registered users are stored in a master rule-module clearinghouse ; 

b. a subset rule-module storage step, wherein a subset of all of the rule-modules 
from registered users is stored in af subset rule-module clearinghouse; 

c. a rule-module invocation step, wMerein upon a successful identification of the 
user, at least one user-customized rule-module is invoked by any of the 

20 following: a subset rule-modulef clearinghouse and a master rule-module 

clearinghouse; / 

d. an electronic commimication execution step, wherein upon the invocation of a 
user-customized rule-module( at least one electronic communication is 
executed, / 

25 / 

27. The method of claim 1 wherein during the registration biometric network transmittal 
step, any of the following public networks is used: a cable network, a wireless cellular 
network, a wireless digital network, a telephone network, a wide area network, the 
Intemet, an ATM network, and mi X.25 connection. 

30 28. The method of claim 1 wherein during the public network data transmittal step, any of 
the following networks is useq: a cable network, a wireless cellular network, a 
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wireless digital network, a telephone network/ a wide area network, the Internet, an 
ATM network, and an X.25 connection. 

29. The method of claim 26 further comprising: 

a. a first rule-module invocation step, Wherein the subset rule-module 
clearinghouse attempts to invoke at least one user-customized rule-module; 

b. a public network data transmittal step, wherein if the subset rule-module 
clearinghouse fails to invoke a useiJ-customized rule-module, the request is 
transmitted to a master rule-modulp clearinghouse via a public 
communications network; 

c. a second rule-module invocation ^tep, wherein a master rule-module 
clearinghouse attempts to invoke jat least one user-customized rule-module; 

d. an electronic communication execution step, wherein upon the earliest 
invocation of a user-customized fule-module, at least one electronic 
communication is executed, 

30. The method of claim 26 wherein the mister rule-module clearinghouse comprises a 
computer database which electronically stores all of the rule-modules for all of the 
registered users. 

31. The method of claim 26 wherein the sAbset rule-module clearinghouse comprising a 
computer database which electronicaljy stores a subset of all of the rule-modules for 
registered users. 



32. A system for tokenless biometric aut lorization of an electronic communication, using 
an electronic communication input apparatus, a biometric input apparatus, and a 
master electronic identicator, wherein said system comprises: 

a. a communication input appa 'atus, further comprising a data entry device for 
formation of an electronic communication; 

further comprising a device for electronically 
directly from the person of a user; 
identicator, further comprising: 
i) a computer database containing all of the electronically stored 
biometric sapiples from all of the registered users; 



b. a biometric input apparatus, 
scanning a biometric sample 

c. at least one master electroni: 
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ii) a comparator that electronically compares/ received a biometric 
sample with previously stored biometric/ samples to deliver 
either a successful or failed identification of the user; 

d. a data transmittal public network that electronically transmits data between the 
biometric input apparatus and a master electronic identicator; 

e. an electronic communication authorization platform that authorizes execution 

of at least one electronic communication upon ^successful identification of 

the user by an electronic identicator; 

wherein an electronic communication is biometrically-authorized without the user having 
to present any personalized man-made memory to)cens such as smartcards, or 
magnetic stripe cards. 



33. The device of claim 32 wherein the master ele/tronic identicator further comprises a 
computer database which: has a location which is physically remote from the site at 

15 which the user submits a biometric sample/directly from his person, and; requires the 

use of a pubUc communication network mat enables receipt of an electronically 
transmitted registration biometric samme. 

34. The device of claim 32 further comprising a subset electronic identicator having: a 
computer database containing a sub/et of all stored biometric samples from registered 

20 users in the computer system, and/ a comparator that compares a received biometric 
sample with previously stored bjrametric samples to deliver either a successful or 
failed identification of the usei? 

35. The device of claim 32 wherein any component of said system is used in any of the 
following chronological sequences: simultaneously, and; separated by any increment 

25 of time including seconds( minutes, hours, days, weeks, months, and years. 

36. The device of claim 34,yiurther comprising: 

a. a first comparator, comprising a subset electronic identicator comparator that 
compares the/bid biometric sample taken directly from the person of the user 
with at leas/ one registration biometric sample previously stored in the subset 
30 electroniaidenticator for producing either a successful or failed identification 

of the user; 
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b. a data transmittal public network, comprising a^public communications 
network that electronically electronically transmits data between the subset 
electronic identicator and a master electronic ifdenticator; 

c. a second comparator, comprising a master electronic identicator comparator 
which, if the subset electronic identicator falls to successfully identify the 
user, compares the bid biometric sample to at least one registration biometric 
sample previously stored in the master electronic identicator for producing 
either a successfiil or failed identification of the user; 

d. a communication authorization platfoirn, that authorizes execution of an 

electronic communication upon the ejirliest successful identification of the 

user by an electronic identicator; 

wherein an electronic communication is biom^trically-authorized without the user having 
to present any personalized man-made m^ory tokens such as smartcards, or 
magnetic swipe cards. 

37. The device of claim 34 further comprising: 

a. an enterprise data input apparaps for an enterprise to electronically input 
registration identity data; 

b. a data transmittal public netWork, further comprising a public communications 
network that electronically transmits data between the enterprise data input 
apparatus and a master eledironic identicator; 

c. an electronic conmiunicatiion authorization platform, that authorizes execution 

of an electronic communication upon a successful identification of the 

enterprise by an electromc identicator and a successful identication of the user 

by an electronic identicator; 

wherein an electronic communicaiion is biometrically-authorized without the user having 
to present any personalized n^an-made memory tokens such as smartcards, or 
magnetic swipe cards. 



30 38. The device of claim 37 wherein any component is used in any of the following 

chronological sequences: simultaneously, and; separated by any increment of time 
including seconds, minutes, hours, days, weeks, months, and years. 
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39. The device of claim 37 further comprising: 

a. a first comparator, com\ rising a subset electronic identicator comparator 

rise bid identity data with enterprise registration 

identity data previoudV stored in the subset electronic identicator for 
producing either a successful or failed identification of the enterprise; 

b. a data transmittal public network, further comprising a public 
communications network that electronically transmits data between the 
subset electronic identicator and a master electronic identicator; 

c. a second comparator, comprising a master electronic identicator 
comparator which, iff the subset electronic identicator fails to successfully 
identify the enterprise, compares the enterprise bid identity data with 
enterprise registration identity data previously stored in the master 
electronic identicalor for producing either a successful or failed 
identification of tme enterprise; 

d. a communicatiorv authorization platform, that authorizes execution of an 
electronic upon me earliest successful identification of the user by an 
electronic identycator and the earliest identification of the enterprise by an 
electronic idenmcator; 

wherein an electronic communication is biometrically-authorized without the user having 
to present any personalized man-made memory tokens such as smartcards, or 
magnetic swipe cards. 

40. The device of claim 32 ^herein the biometric sample taken directly fi"om the person 
of the user comprises aaiy of the following: a fingerprint, a facial scan, a retinal image, 
an iris scan, and a voice print. 

41. The device of claim p7 wherein the enterprise is a legally formed entity comprising 
any of the following: a corporation, a foundation, a non-profit organization, a sole 
proprietorship, a Imiited liability company, and a partnership. 

42. The device of claim 32 wherein the user further provides a personal identification 
code to the electronic identicator along with a bid biometric sample for purposes of 
identifying the user. 
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43. The device of claim 37 further comprising a user re-registration platform, wherein the 
user's registration biometric sample is compared by at least one electronic identicator 
to previously registered biometric samples wherein if a match occurs, the electronic 
identicator is alerted to the fact that the user has attempted to re-register. 

44. The device of claim 42 further comprising a biometric theft resolution platform, 
wherein a user's personal identification code is changed when the user's registered 
biometric sample is determined to have been fraudulently duplicated. 

45. The device of claim 32, wherein an electronic communication comprises any of the 
following: an email, a telephone call, an encryp/ed data packet, an Internet telephony, 
and a facsimile. / 

46. The device of claim 32, wherein the data transmittal public network further comprises 
any of the following: an extranet, a wide area network, a cable network, a wireless 
network, a telephone network, the Intemeu an ATM network, or an X.25. 

47. The device of claim 37 wherein enterprise registration identity data comprises any of 
the following: an alpha-numeric code, a hardware identification code, an email 
address, a financial account, a biomemc of an authorized enterprise representative, a 
non-financial data repository accoum, a telephone number, a mailing address, a digital 
certificate, a network credential, a^Intemet protocol address, a digital signature, an 
encryption key, and an instant messaging address. 

48. The device of claim 32 further/comprising a third-party server interconnecting 
network, wherein the electronic communication execution platform interconnects 
with one or more third-party servers in order to execute the electronic 
communication. / 

49. The device of claim 32 further comprising: 

a. a rule-module clearinghouse, further comprising at least one user-customized 
pattern d^fta which is associated with at least one execution command; 

b. a ruleTmodule invocation platform, that invokes at least one previously 
designated user-customized rule-module upon successful identification of the 
u^r; 
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c. an electronic communication execution platforai, that executes at least one 
electronic communication upon the invocation of a/user-customized rule- 
module. / 

50. The device of claim 49 wherein pattern data comprisesAny of the following: a user 
unique identification code: demographic informationvan email address; a financial 
account; a biometric; internet browsing patterns; a npn- financial data repository 
account; a telephone number; a mailing address; purchasing pattems; database 
authorization fields; financial credit report data; ar call-center queuing, routing and 
automated response program; an email-center queuing, routing and automated 
response program; data on pre-paid accounts or memberships for products or services; 
electronic data utilization pattems; employe^status; job title; data on user behavior 
pattems; a digital certificate; a network credential; an intemet protocol address; a 
digital signature; an encryption key; an infant messaging address; user-customized 
medical records; an electronic audio signature; and an electronic visual signature. 

51. The device of claim 49 wherein said execution commands fiirther comprise user- 
customized instructions for execution of any of the following: accessing of stored 
electronic data, processing of electromic data, and presentation of electronic data. 

52. The device of claim 51 wherein user-customized accessing of stored electronic data 
fiirther comprises execution of any/of the following: activation of an Intemet- 
connected device; accessing of a secured physical space, and unlocking of a secured 
physical device. / 

53. The device of claim 51, wherein user-customized processing of electronic data fiirther 
comprises invoking any of the/following: a digital certificate, an identity scrambler, a 
database authorization field, am electronic consumer loyalty or consumer rewards 
incentive, an electronic advertisement, an instant messaging program, real-time 
tracking of an incoming caUer or an email sender, a time and attendance monitoring 
program, an emergency home alarm and personal safety notification program, a real- 
time challenge-response program, a call-center queuing prioritization program, a call- 
center routing prioritizafion program, an email-center queuing prioritization program, 
an email-center routing prioritization program, an automated caller or emailer 
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response program, a call-forwarding program, and an electronic intelligent software 
program for electronic data search and retrieval. / 

54. The device of claim 51 wherein user-customized presentation of electronic data 
comprises any of the following: a print-out, a compuier screen display, an audio 
message, a tactile sensation and a holographic image. 

55. The device of claim 49 wherein the rule-module invocation platform is interconnected 
with one or more third-party computers, / 

56. The device of claim 49, wherein user-customized pattern data is provided to the 
electronic rule-module clearinghouse by any off the following: the user, the electronic 
identicator, the electronic rule-module clearinghouse, and a user-authorized third 
party. / 

57. The device of claim 49, wherein user-customized execution commands are provided 
to the electronic rule-module clearinghouse by any of the following: the user, the 
electronic rule-module clearinghouse, theyelectronic identicator and a user-authorized 
third party. / 

58. The device of claim 49 further comprising: 

a. a master rule-module clearinghpuse, comprising a computer database storing 
all of the rule-modules for all of the registered users; 

b. a subset rule-module clearinsPiouse, comprising computer database storing a 
subset of all of the nile-modules for registered users; 

c. a rule-module invocation pJatform, that invokes at least one user-customized 
rule-module upon identification of the user, said platform comprising any of 
the following: a subset nile-module clearinghouse and a master rule-module 
clearinghouse; / 

d. an electronic communication execution platform, that executes at least one 
electronic communicaiion upon the invocation of a user-customized rule- 
module. / 

59. The device of claim 32 wherein the data transmittal public network further comprises: 
a cable network, a wireless /cellular network, a wireless digital network, a telephone 
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networl/, a wide area network, the Internet, an ATM network, and an X.25 



Q connecjion. 
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. The device of claim 32 wherein the master electronic identicator further comprises a 
computer database having a location which is physically remote from the site at 
^ \ which the user submitted the r jgistration biometric sample. 

The device of claim 34 wherein the subset electronic identicator fixrther comprises a 
computer database: being phypically remote from the master identicator, and; capable 
O^f using any communications network for receiving the bid biometric sample. 
^ . The device of claim 58 further comprising: 

a. a first rule-module invocation platform, comprising a subset rule-module 
clearinghouse that invokes at least one user-customized rule-module; 

b. a data transmittal public network, wherein if the subset rule-module 
clearinghouse fails to invoke a user-customized rule-module, the request is 
transmitted via a puljlic communications network to a master rule-module 
clearinghouse; 

c. a second rule-modujle invocation platform, comprising a master rule-module 
clearinghouse that invokes at least one user-customized rule-module; 

d. an electronic comniunication execution platform, that executes at least one 
electronic communication upon the earliest invocation of a user-customized 
rule-module by a rule-module clearinghouse. 

The device of claim 58 wAxerein the subset rule-module clearinghouse is physically 
remote from the master rule-module clearinghouse. 
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